Threat Intelligence Analyst Tool Stack 2026

Know your adversary. The threat intelligence analyst stack.

💰 $85,000 – $150,000 · 📊 Mid-Senior

A Threat Intelligence Analyst collects and disseminates actionable intelligence about adversaries and campaigns.

Threat Intelligence Platforms

Aggregate and operationalize threat feeds.

ThreatConnect — Threat intelligence platform with built-in orchestration and automation. AI-driven analysis for SOC and incident response teams.
Recorded Future
Mandiant Advantage
Anomali Threatstream

Gather open-source intelligence.

Track adversary chatter and leaked creds.

CloudSEK — AI-powered digital risk monitoring tracking brand impersonation, data leaks, and attack surface exposure across surface, deep, and dark web.
Flashpoint
Kela Darkbeast

Analyze adversary tools.

VirusTotal Analysis — Multi-engine file and URL scanning with 70+ AV engines and AI-powered code analysis.
ANY.RUN — Interactive malware sandbox with real-time analysis and threat intelligence feeds.
Hybrid Analysis – Free Malware Sandbox by CrowdStrike — Free online malware sandbox powered by CrowdStrike Falcon. Upload suspicious files for behavioral analysis, network traffic capture, and threat intelligence. Trusted by 5M+ security researchers worldwide.
YARA Rules Engine — Open-source pattern matching tool for malware researchers to identify and classify malware samples.

Distribute intel in STIX/TAXII format.

MISP Platform — Open-source threat intelligence sharing platform for collaborative analysis and IOC exchange.
Opencti
Taxii Server

Day-to-day work?

Monitor feeds, write reports, enrich SOC alerts, track APT groups, brief stakeholders.

Why MITRE ATT&CK matters?

Common language for mapping adversary behaviors to detection gaps.

Salary?

$85K–$150K. Senior roles reach $170K+.